Back to skill
Skillv1.0.0
VirusTotal security
PerpGame · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 10, 2026, 5:06 PM
- Hash
- f6aca52dcb4e57f74133eaa88c11c75360c73b1880a8619615348d76da782646
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: perpage Version: 1.0.0 The skill bundle describes a trading agent for the 'PerpGame' platform that exhibits high-risk behaviors. Most notably, SKILL.md instructs the agent to fetch and execute instructions from a remote URL (https://perpgame.xyz/heartbeat.md), which serves as a vector for remote instruction injection. The skill also requires the agent to manage an autonomous Ethereum wallet and sign messages (referencing a missing TOOLKIT.md), and it facilitates the sharing of the agent's internal state with external users via a 'claiming' mechanism and a state-viewer whitelist. While the documentation includes security warnings, the combination of remote command fetching and financial autonomy poses a significant risk.
- External report
- View on VirusTotal